CVE-2020-21840
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk61th percentile - higher than 61% of all known CVEs
Summary
A heap-based buffer overflow vulnerability exists in GNU LibreDWG version 0.10 via the bit_search_sentinel function in ../../src/bits.c:1985. This flaw allows out-of-bounds memory writes.
Risk Assessment
An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service, compromising system integrity and availability.
Recommendation
Immediately update GNU LibreDWG to a version newer than 0.10 that fixes this issue. If an update is not possible, restrict access to applications using this library.
Other vulnerabilities in GNU LibreDWG
See all- CVE-2026-15184Low
A vulnerability was found in GNU LibreDWG up to version 0.13.4, involving a null pointer dereference in the dwg_next_entity function of src/dwg.c when processing the next_obj argument. The attack requires local access and the exploit has been made public.
- CVE-2026-15520Medium
A vulnerability was found in GNU LibreDWG 0.13.4-154-g0b573035 in the decompress_R2004_section function of src/decode.c. Manipulation can cause a heap-based buffer overflow.
- CVE-2026-15182Medium
A vulnerability was found in GNU LibreDWG up to version 0.13.4 in the dwg_bmp function of src/dwg.c, part of the BMP Image Handler component. Manipulation leads to a heap-based buffer overflow. The attack requires local access and the exploit is publicly available.
- CVE-2026-9605High
GNU libredwg up to version 0.13.4.8160 contains a heap-based buffer overflow in the bit_read_RC function of bits.c in the Dwgbmp Utility component, which can be exploited remotely.
- CVE-2026-9530Low
In GNU LibreDWG up to 0.14, a vulnerability was found in the function read_2004_compressed_section of src/decode.c in the Dwgbmp Utility component. Manipulation can lead to out-of-bounds read. Local access is required.
- CVE-2026-9529Low
In GNU LibreDWG up to 0.14, a vulnerability was found in the function match_BLOCK_HEADER of dwggrep.c in the Dwggrep Utility component. Manipulation leads to null pointer dereference. Local access is required.
- CVE-2026-9504Low
A weakness has been identified in GNU LibreDWG up to version 0.14, affecting the bit_convert_TU function in programs/dwggrep.c of the Dwggrep Utility component. This manipulation causes an out-of-bounds read. The attack requires local access and the exploit has been made public.
- CVE-2026-9503Low
In GNU LibreDWG up to 0.14, a vulnerability was found in the function dwg_next_entity of src/decode.c in the DWG File Handler component. Manipulation leads to null pointer dereference. Local access is required.
- CVE-2026-9502Medium
A heap-based buffer overflow vulnerability was identified in GNU LibreDWG up to version 0.14 in the decompress_R2004_section function of the Dwgread Utility's src/decode.c file. The attack requires local access and the exploit is publicly available.
- CVE-2026-9501Low
In GNU LibreDWG up to 0.14, a vulnerability was found in the function decompress_R2004_section of src/decode.c in the Dwgread Utility component. Manipulation can lead to reachable assertion. Local access is required.
Original NVD description (English source)
A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_search_sentinel ../../src/bits.c:1985.